Skip to content
Heist/ feed
Back to feed
High

OpenClaw < 2026.4.10 - Arbitrary Local File Read via QQBot Media Tags

Type: advisorySources: OSV

OpenClaw before 2026.4.10 contains an arbitrary file read vulnerability in QQBot media tags that allows attackers to reference host-local paths outside the intended media storage boundary. Attackers can craft malicious reply text containing media tags to disclose arbitrary local files through outbound media handling.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2026-43533
Confirmed fixed CVEs
Not specified
Updated in this feed
2 Nov 2026, 23:37 UTC · Revision 1

Source evidence

OpenClaw < 2026.4.10 - Arbitrary Local File Read via QQBot Media Tags

core-osv · Original source

Published 5 May 2026, 11:25 UTC

OpenClaw before 2026.4.10 contains an arbitrary file read vulnerability in QQBot media tags that allows attackers to reference host-local paths outside the intended media storage boundary. Attackers can craft malicious reply text containing media tags to disclose arbitrary local files through outbound media handling.

osv:CVE-2026-43533
Complete source record
{
  "id": "5f33f4125ff8bdfac81374687bf1fa41ec3bf23d2d29c6c7ae94970bb5190630",
  "url": "https://osv.dev/vulnerability/CVE-2026-43533",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "OpenClaw < 2026.4.10 - Arbitrary Local File Read via QQBot Media Tags",
    "summary": "OpenClaw before 2026.4.10 contains an arbitrary file read vulnerability in QQBot media tags that allows attackers to reference host-local paths outside the intended media storage boundary. Attackers can craft malicious reply text containing media tags to disclose arbitrary local files through outbound media handling.",
    "evidence": "osv:CVE-2026-43533",
    "products": [],
    "severity": "high",
    "structured": {
      "id": "CVE-2026-43533",
      "aliases": [
        "CVE-2026-43533",
        "GHSA-66r7-m7xm-v49h"
      ],
      "metrics": [
        {
          "type": "CVSS_V4",
          "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/openclaw/openclaw",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "44e5b62c27e088128e32e209c146de346c3ea7e6"
                },
                {
                  "fixed": "604777e4414cc3b2ff8861f18f4fb04374c702c6"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "2026.4.10"
                      }
                    ],
                    "source": "CPE_RANGE"
                  },
                  {
                    "range": [
                      {
                        "fixed": "604777e4414cc3b2ff8861f18f4fb04374c702c6"
                      }
                    ],
                    "source": "REFERENCES_COMMIT"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v2026.4.9",
            "v2026.4.9-beta.1",
            "v2026.4.8",
            "v2026.4.7-1",
            "v2026.4.7",
            "v2026.4.5",
            "v2026.4.2",
            "v2026.4.1",
            "v2026.4.1-beta.1",
            "v2026.3.31",
            "v2026.3.31-beta.1",
            "v2026.3.28",
            "v2026.3.28-beta.1",
            "v2026.3.24",
            "v2026.3.24-beta.2",
            "v2026.3.24-beta.1",
            "v2026.3.23-2",
            "v2026.3.23",
            "v2026.3.23-beta.1",
            "v2026.3.22",
            "v2026.3.22-beta.1",
            "v2026.3.13-1",
            "v2026.3.13",
            "v2026.3.12",
            "v2026.3.11",
            "v2026.3.11-beta.1",
            "v2026.3.8",
            "v2026.3.8-beta.1",
            "v2026.3.7",
            "v2026.3.7-beta.1",
            "v2026.3.2-beta.1",
            "v2026.3.2",
            "v2026.3.1",
            "v2026.2.26",
            "v2026.2.26-beta.1",
            "v2026.2.25",
            "v2026.2.25-beta.1",
            "v2026.2.24",
            "v2026.2.24-beta.1",
            "v2026.2.23",
            "v2026.2.23-beta.1",
            "v2026.2.22",
            "v2026.2.22-beta.1",
            "v2026.2.21",
            "v2026.2.21-beta.1",
            "v2026.2.19-beta.1",
            "v2026.2.19",
            "v2026.2.17",
            "v2026.2.15-beta.1",
            "v2026.2.14",
            "v2026.2.13",
            "v2026.2.12",
            "v2026.2.9",
            "v2026.2.6-3",
            "v2026.2.6-2",
            "v2026.2.6-1",
            "v2026.2.6",
            "v2026.2.3",
            "v2026.2.2",
            "v2026.2.1",
            "v2026.1.30",
            "v2026.1.29",
            "v2026.1.24-1",
            "v2026.1.24",
            "v2026.1.23",
            "v2026.1.22",
            "v2026.1.21",
            "v2026.1.20",
            "v2026.1.16-2",
            "v2026.1.15",
            "v2026.1.14-1",
            "v2026.1.13",
            "v2026.1.12-2",
            "v2026.1.12",
            "v2026.1.11-3",
            "v2026.1.11-2",
            "v2026.1.11-1",
            "v2026.1.11",
            "v2026.1.10",
            "v2026.1.9",
            "v2026.1.8",
            "v2026.1.5-3",
            "v2026.1.5-2",
            "v2026.1.5-1",
            "v2026.1.5",
            "v2.0.0-beta5",
            "v2.0.0-beta4",
            "v2.0.0-beta3",
            "v2.0.0-beta2",
            "v2.0.0-beta1",
            "v1.3.0",
            "v1.2.2",
            "v1.2.1",
            "v1.2.0",
            "v1.1.0",
            "v1.0.4",
            "v0.1.3",
            "v0.1.2",
            "v0.1.1",
            "v0.1.0"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43533.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:24.560657804Z",
      "provider": "osv",
      "references": [
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43533.json",
        "https://github.com/openclaw/openclaw/security/advisories/GHSA-66r7-m7xm-v49h",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-43533",
        "https://www.vulncheck.com/advisories/openclaw-arbitrary-local-file-read-via-qqbot-media-tags",
        "https://github.com/openclaw/openclaw/commit/604777e4414cc3b2ff8861f18f4fb04374c702c6"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-23"
        ],
        "cna_assigner": "VulnCheck",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43533.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-43533",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 490926,
  "published_at": "2026-05-05T11:25:05.764+00:00"
}